Competitors to Zoom, for example, WebEx, have even more vulnerabilities than Zoom. Count the CVEs on cve.mitre.org. The small players haven't been poked as hard.
Not disputing that WebEx is worse, but CVE counting should never be a metric for security.